GHSA-59qp-cfj3-rp64Medium▾ Sunlitnetfoil has a domain name filter bypass via multiple questions
▾ Sunlit zone — Low / medium · no exploitation signal
impact 27.5 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Potential bypass of domain name filter by crafting a DNS request with multiple questions, with the first question being legitimate.
Depends on a local attackers ability to craft multiple questions and the remote DoH server supporting them.
github.com/tinfoil-factory/netfoil < 0.3.0Upgrade to a patched release:
github.com/tinfoil-factory/netfoil 0.3.0Connected by shared product, vendor, weakness, or advisory.
GHSA-xvg2-cgv6-6h7vHighnetfoil: Incorrect block responses could lead to localhost traffic
GO-2026-5934Nonenetfoil has a domain name filter bypass via multiple questions in github.com/tinfoil-factory/netfoil
GO-2026-6277Nonenetfoil vulnerable to improper handling of untrusted DoH response data in github.com/tinfoil-factory/netfoil
GHSA-4ph6-mjv7-3fq6Lownetfoil vulnerable to improper handling of untrusted DoH response data
GO-2026-6143Nonenetfoil: Incorrect block responses could lead to localhost traffic in github.com/tinfoil-factory/netfoil
GO-2026-5935Nonenetfoil: Attacker controlled data written to logs in github.com/tinfoil-factory/netfoil